i18next records
6 published records for vendor i18next.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2026-48713No exploit | i18next-fs-backend: Prototype pollution via crafted missing-key stringi18next · i18next-fs-backend · CWE-1321 | Critical9.1 | — | 0.4% | Jun 15, 2026 |
36Monitor | CVE-2026-48714No exploit | i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting namesi18next · i18next-http-middleware · CWE-1321 | Critical9.1 | — | 0.4% | Jun 15, 2026 |
36Monitor | CVE-2026-41691No exploit | i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/nsi18next · i18next-http-backend · CWE-22 | Critical9.1 | — | 0.3% | May 7, 2026 |
24Monitor | CVE-2017-16010No exploit | i18next is a language translation framework.i18next · i18next · CWE-79 | Medium6.1 | — | 1.0% | May 29, 2018 |
24Monitor | CVE-2017-16008No exploit | i18next is a language translation framework.i18next · i18next · CWE-79 | Medium6.1 | — | 0.8% | Jun 4, 2018 |
18Monitor | CVE-2026-41692No exploit | i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributesi18next · i18nextify · CWE-79 | Medium4.7 | — | 0.1% | May 7, 2026 |
- CVE-2026-4871336Monitor
i18next-fs-backend: Prototype pollution via crafted missing-key string
CriticalCVSS 9.1No exploitEPSS 0%i18next · i18next-fs-backendJun 15, 2026
- CVE-2026-4871436Monitor
i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names
CriticalCVSS 9.1No exploitEPSS 0%i18next · i18next-http-middlewareJun 15, 2026
- CVE-2026-4169136Monitor
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns
CriticalCVSS 9.1No exploitEPSS 0%i18next · i18next-http-backendMay 7, 2026
- CVE-2017-1601024Monitor
i18next is a language translation framework.
MediumCVSS 6.1No exploitEPSS 1%i18next · i18nextMay 29, 2018
- CVE-2017-1600824Monitor
i18next is a language translation framework.
MediumCVSS 6.1No exploitEPSS 0%i18next · i18nextJun 4, 2018
- CVE-2026-4169218Monitor
i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributes
MediumCVSS 4.7No exploitEPSS 0%i18next · i18nextifyMay 7, 2026